Privacy Policy

This Privacy Policy describes how 10Fold AI Solutions ("we", "us", or "our"), operating the ReelKatha platform at reelkatha.com, collects, uses, and protects your personal information when you use our services. This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Information We Collect

a) Information you provide

• Phone number — used for OTP-based authentication and account identification
• Content prompts — the text ideas and story prompts you submit to generate video reels
• Payment information — processed securely through Cashfree Payments, our third-party payment gateway; we do not store your card or bank details directly

b) Information collected automatically

• Device information — browser type, operating system, screen resolution
• Usage data — pages visited, features used, generation history, time spent
• Cookies and similar technologies — session cookies for authentication, preference cookies for language settings, and advertising/analytics cookies as described in Section 8
• IP address — for security, rate-limiting, and approximate geographic location
• Marketing attribution data — UTM parameters (source, medium, campaign) from referring links, and Meta click identifiers (fbclid) to measure advertising effectiveness

2. How We Use Your Information

• To provide and maintain our video generation services
• To authenticate your identity via OTP verification
• To process credit purchases and maintain your account balance
• To analyse platform usage and improve our services and user experience
• To send service-related notifications (e.g., generation status, credit balance)
• To detect and prevent fraud, abuse, and unauthorized access
• To measure advertising performance and optimise marketing campaigns
• To comply with legal obligations

Note on AI training: Your prompts are sent to third-party AI providers (listed in Section 4) solely for the purpose of generating your content. We do not independently train or fine-tune AI models on your prompts. Third-party AI providers may have their own data retention and use policies — we recommend reviewing their terms.

3. Data Storage, Security & Retention

Your data is stored securely using Supabase (hosted on AWS infrastructure) with encryption at rest and in transit. Generated media (images, audio, video) are stored in secure cloud storage buckets.

We implement industry-standard security measures including rate limiting, input validation, and secure session management to protect your data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention Periods

• Account data (phone number, profile) — retained as long as your account is active, and for up to 180 days after account deletion to comply with legal and financial record-keeping requirements
• Generated content (images, audio, video) — retained as long as your account is active; deleted within 90 days of account deletion
• Content prompts — retained as long as your account is active to enable project history and regeneration
• Payment records — retained for a minimum of 8 years as required by Indian tax and financial regulations
• OTP codes — automatically expire within 10 minutes of generation and are not retained after verification
• Login attempt logs — retained for 90 days for security monitoring
• Analytics and usage data — retained for up to 24 months in aggregate form
• IP addresses — retained for 90 days for security purposes

4. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase (AWS, US/EU) — database and authentication
• Vercel (global CDN) — hosting, deployment, and web analytics
• Cashfree Payments (India) — payment processing for credit purchases
• Google Gemini (US) — AI content research and script generation
• DeepSeek (China) — AI script generation and content safety filtering
• Flux / FAL.ai (US) — AI image generation
• Inworld, Sarvam, ElevenLabs (US/India) — AI text-to-speech and voiceover
• Meta (Facebook/Instagram) (US) — advertising measurement via Meta Pixel and Conversions API
• Microsoft Clarity (US) — session recording and heatmap analytics

Each third-party service has its own privacy policy. We recommend reviewing their policies for information about how they handle your data.

5. Cross-Border Data Transfers

To provide our services, your data may be transferred to and processed in countries outside India, including the United States and China. Specifically:

• Content prompts may be sent to AI providers located in the US (Google, FAL.ai) and China (DeepSeek) for content generation
• Usage and analytics data may be processed by Vercel (global), Meta (US), and Microsoft (US)
• Account and media data is stored on AWS infrastructure via Supabase

These transfers are necessary for the performance of our services. We ensure that any such transfers comply with applicable data protection laws, including the DPDP Act, 2023. If the Government of India restricts data transfers to specific countries in the future, we will update our data processing practices accordingly.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following cases:

• With service providers necessary to operate the platform (as listed in Section 4)
• With advertising platforms (Meta) in hashed or anonymised form for campaign measurement and optimisation
• When required by law, regulation, or legal process
• To protect our rights, property, or safety, or that of our users
• In connection with a merger, acquisition, or sale of assets, with prior notice to users

7. Your Rights

Under applicable Indian data protection laws, including the DPDP Act, 2023, you have the right to:

• Access — request a summary of your personal data and how it is being processed
• Correction — request correction, completion, or updating of inaccurate data
• Deletion (Erasure) — request deletion of your account and associated personal data, subject to legal retention requirements (see Section 3)
• Data portability — receive your data in a structured, commonly used, machine-readable format
• Withdraw consent — withdraw your consent to data processing at any time (note: this may affect your ability to use our services)
• Grievance redressal — raise a complaint about our data handling practices with our Grievance Officer (see Section 13)
• Nominate — nominate another individual to exercise your data rights in the event of your death or incapacity, as provided under the DPDP Act

To exercise any of these rights, please contact us at 10foldaisolutions@gmail.com. We will respond to your request within 30 days.

8. Content You Create

Videos and content you generate using ReelKatha belong to you. You may download, share, and use them on any platform including for commercial purposes. We may retain generated content for as long as your account is active to enable project history, re-editing, and re-downloads. Upon account deletion, generated content is removed within 90 days.

9. Cookies & Tracking Technologies

We use the following cookies and similar technologies:

a) Essential cookies (required for platform operation)

• rk_session — keeps you logged in across sessions
• rk_locale — remembers your language and locale preference

b) Analytics and advertising cookies

• _fbp (Meta Pixel) — browser identifier used by Meta (Facebook/Instagram) to measure advertising effectiveness and attribute conversions. Set by Meta Pixel script.
• _fbc (Meta Click ID) — captures the Facebook click identifier from ad URLs to attribute ad clicks to conversions. Expires after 90 days.
• rk_utm — stores UTM marketing attribution parameters (source, medium, campaign) from referring links to measure marketing channel performance

c) Third-party analytics

• Vercel Analytics — privacy-focused web analytics for page performance monitoring
• Microsoft Clarity — session replay and heatmap analytics to understand user experience. Clarity may record mouse movements, clicks, and scrolls. Clarity does not collect passwords or payment information.
• Meta Conversions API — server-side event tracking that sends hashed user data (phone number hash, IP address, browser information) to Meta for ad measurement. This operates alongside Meta Pixel for deduplication.

10. Children's Privacy

ReelKatha is not intended for use by children under the age of 18 without verifiable parental consent, in accordance with the DPDP Act, 2023. We do not knowingly collect personal information from children under 18 without such consent. If we discover that a child has provided personal information without appropriate consent, we will delete it promptly. If you believe a child is using our platform without proper consent, please contact us at 10foldaisolutions@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes that significantly affect your rights, we will make reasonable efforts to notify you (e.g., via a notice on the platform). Your continued use of the platform after changes constitutes acceptance of the revised policy.

12. Consent

By using ReelKatha, you consent to the collection, use, storage, and processing of your information as described in this Privacy Policy. Where specific processing activities require your explicit consent (such as marketing communications), we will seek it separately. You may withdraw your consent at any time by contacting us, though this may limit your ability to use certain features.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, the Grievance Officer for the purpose of this Privacy Policy is:

14. Contact

For privacy-related inquiries or to exercise your data rights, contact us at: